Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/01f98ffbee845bf9f8677f51b1eb7dbdd2995e6d.roa
File:                     01f98ffbee845bf9f8677f51b1eb7dbdd2995e6d.roa (raw, json)
Hash identifier:          vRnq+GhuVpbRBbpRlDs3Yt5feJkAXi1CGYKPzM9hkb8=
Subject key identifier:   B9:7E:BC:77:B4:3F:22:0C:62:D5:54:E0:8D:C3:49:DF:CF:90:48:02
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       23C3A1
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/01f98ffbee845bf9f8677f51b1eb7dbdd2995e6d.roa
Signing time:             Mon 25 Sep 2023 15:28:18 +0000
ROA not before:           Sun 24 Sep 2023 15:28:11 +0000
ROA not after:            Thu 25 Sep 2025 15:28:11 +0000
asID:                     23007
IP address blocks:        150.185.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343841 (0x23c3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Sep 24 15:28:11 2023 GMT
            Not After : Sep 25 15:28:11 2025 GMT
        Subject: CN=01f98ffbee845bf9f8677f51b1eb7dbdd2995e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:a8:eb:d6:bb:9b:9d:09:3f:63:9f:3e:f3:
                    56:78:98:c8:11:db:21:c3:6a:67:cc:5a:4c:a4:58:
                    30:d1:c6:9e:d2:2b:86:39:7d:51:fe:75:82:c2:5b:
                    31:16:f5:00:16:4c:d9:bf:65:88:5f:a8:88:50:d2:
                    ef:e1:b1:0e:5b:91:46:ca:84:3f:99:be:18:4f:30:
                    f1:ac:ad:45:b3:20:b8:3e:f3:77:f0:01:b5:00:e1:
                    d7:83:04:a4:a4:25:98:2a:97:2a:fa:3e:e4:72:14:
                    a5:26:91:82:07:ac:0d:b7:b3:a4:b9:15:3a:0c:4c:
                    56:02:e8:12:72:f4:3b:76:ee:d3:90:7d:3a:21:6c:
                    14:1a:fc:a3:22:9b:08:db:d3:b5:10:92:e6:87:4e:
                    86:b8:b5:03:6a:59:40:a8:79:67:ce:5f:5c:50:0f:
                    b8:1b:ba:7f:d5:01:78:e6:17:87:45:de:58:8f:02:
                    51:e6:35:62:4e:9e:8a:12:38:66:c1:9c:78:79:3c:
                    47:d1:4a:da:03:ad:48:47:f0:ba:86:19:98:37:f8:
                    47:9c:cb:44:31:c9:32:e9:f2:c6:1b:1f:c6:d3:79:
                    91:35:5d:6d:84:f2:19:8f:ea:98:da:b5:f1:dc:d6:
                    8f:83:a0:3b:00:00:91:7c:fc:0d:d5:33:49:25:9c:
                    bf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7E:BC:77:B4:3F:22:0C:62:D5:54:E0:8D:C3:49:DF:CF:90:48:02
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/01f98ffbee845bf9f8677f51b1eb7dbdd2995e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:f1:65:95:65:6a:ce:53:04:d5:ea:64:1e:c7:f8:59:b4:
         a7:9f:20:a3:6f:8d:1a:a6:65:5a:e8:44:99:48:af:61:85:a5:
         04:a1:c9:df:7a:3d:1c:3c:44:16:76:a5:d8:e3:5a:06:9c:93:
         9c:11:8a:09:a8:78:9e:f7:1e:76:3b:45:d0:e5:0f:46:99:a0:
         45:c2:36:d7:bf:0e:5e:1a:9d:d8:3d:3f:0c:3c:dd:87:0d:8a:
         c5:48:ac:bd:a9:6b:bc:e8:bd:ad:e8:11:9e:45:80:4a:a8:c6:
         5e:c7:c8:4a:a1:49:87:af:cb:0a:e1:c0:34:2c:86:31:6c:56:
         10:d8:a4:87:b5:6e:c7:c9:79:0e:8a:85:f8:07:df:66:20:b5:
         de:aa:83:6b:fc:21:01:19:1a:88:3c:d5:2d:c3:a8:64:73:9b:
         ff:91:79:89:33:06:db:cf:e5:20:53:8d:93:aa:af:8b:8a:40:
         d6:a8:00:ec:4d:be:6d:20:c8:6d:f6:40:2f:e8:6e:dc:f8:9f:
         91:92:c3:28:e7:46:b3:be:91:8d:17:b5:0b:b0:6d:35:86:99:
         eb:66:e0:c3:2b:9f:42:d0:28:71:fa:a1:5d:27:36:c7:62:8d:
         a0:fa:d4:31:60:e7:3f:92:f2:c5:74:0b:35:6a:5c:aa:e7:24:
         7d:1a:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----